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25 JUL 1980 


MEMORANDUM FOR: eee 
to the or Compartmentation 


FROM: 

Director of Security 
SUBJECT: Single Repository for APEX NdA 
REFERENCE: Your draft memorandum to Members, APEX 


Steering Group dated 23 July 1980, 
same subject 


. l. Your request for comments concerning a single 
repository for all APEX Nondisclosure Agreements (NdA's) 
provides me an opportunity to reaffirm that this Office will 


support any objective which. leads to the timely and effective 


implementation of the Special Access Control System. I 

would be less than candid, however, if I failed to indicate 
several areas of concern with both your draft and the Psopeses. 
central index. 


2. In your referenced draft memorandum, you note that 
failure to create a single repository will cause new problems, 
among them the need to establish many individual storage 
systems. This Office presently uses existing Security 
folders to store NdA's. For the CIA to participate in 
a central records. system would require some NFIB member to 
create a new indexing, filing, retrieval and retirement 
mechanism where one already exists. This additional burden, 
in and of itself, would not cause me to withhold OS participation. 
I submit to you, however, that in our particular case the 
proposed central repository would require additional resources 
and not, as your draft suggests, be less of a burden. 


3. Your draft also expresses concern that the failure 
to establish a central index will force future Government 


legal officers to seek out all NdA's signed by an alleged 
violator. It is my understanding that APEX will require 
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an individual to sign only one NdA and that all subsequent 
participation.in the system will be recorded on a briefing 


‘access form. These administrative documents will merely 


allow for updating of the 4C data base and will in no way 
constitute a legally enforceable nondisclosure statement. 
Since the 4C data base will contain a field indicating which 
APEX member sponsored the original access request, the task 
of quickly locating the sole NdA would not appear to be 


‘prohibitive. 


4. As you know, by 1983 there will be some 63 terminals 
in the 4C network capable of remotely adding and deleting 
names from the current index. The central records repository 
manager would presumably be eXpected to insure that an NdA 
is on file for each individual who is or was in the system. 
But the 4C system architecture allows individual NFIB members 
to alter the current data base without necessarily informing. 
the Data Base Manager or the Records Management Officer. 
Thus, unless the terminal users are absolutely conscientious 
about forwarding each paper copy NdA, the proposed central 
records repository will be neither timely nor accurate. 


5. While suggesting that the reservations I'ye expressed 
above are deserving of further exploration, I continue: to. ~ 
support the APEX Steering Group's attempts to reach a 
consensus on this issue. As a senior manager, however, I 
must also forward the fears expressed by Office of Security 
line managers concerning our present ability to fully support 
an APEX Control Registry as a service of common concern. 
Experience has_shown that the CIA alone generates[__———sédC STAT 
industrial andl ————CsdSC. approvals annually ---a =... - 
substantially smaller total than the combined Department of 
Defense and National Security Agency yearly transactions. 

We conservatively estimate that it would require three 
clerical employees to support the requirements of the proposed 
central index. I am, of course, prepared to discuss this 
collateral aspect of your draft proposal in greater detail 

and at your convenience. I am mentioning it here to apprise 
you of the need for more detailed discussions. I am most 
reluctant to commit the resources of this Office to any 
project until I can be assured we can support the effort in 
the thorough, professional manner I am sure you would expect. 
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